Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93D9AC94CACC11EFBF687CA8762E951A.roa
File: 93D9AC94CACC11EFBF687CA8762E951A.roa (raw, json)
Hash identifier: YrNCGPOJHt6pQ9GUIcjplF5/HkSzg9kY7G72lv2ZUO4=
Subject key identifier: 20:2C:8F:FD:F4:DA:CA:2A:E9:8C:27:56:69:3E:AD:D0:95:94:77:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: F75C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93D9AC94CACC11EFBF687CA8762E951A.roa
Signing time: Sat 04 Jan 2025 18:49:07 +0000
ROA not before: Sun 05 Jan 2025 18:49:04 +0000
ROA not after: Fri 17 Jan 2025 18:49:04 +0000
asID: 39600
IP address blocks: 156.255.84.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63324 (0xf75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Jan 5 18:49:04 2025 GMT
Not After : Jan 17 18:49:04 2025 GMT
Subject: CN=677982a3-3b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:d9:91:40:6d:c9:25:56:74:42:a1:2a:32:
44:7b:36:ce:d4:06:a0:d7:45:6f:b4:82:ab:5d:3d:
23:aa:ab:f0:85:db:6c:6a:00:64:86:d2:d8:04:c1:
96:72:c6:3e:86:10:e1:a6:19:bd:5c:80:b9:52:37:
ee:41:5f:af:47:db:6a:c2:98:4b:b8:40:8e:72:53:
d7:41:30:11:f2:27:80:7d:14:d4:0e:d7:8b:cb:4a:
f5:43:90:86:1d:e2:94:4d:c1:99:4b:c9:6d:85:c4:
02:dd:7d:59:3f:db:54:fb:79:53:3e:26:22:61:36:
6d:ea:aa:5e:11:79:34:9d:65:5f:b9:b5:1e:ad:29:
e5:0f:9f:fa:c7:a2:b8:72:8d:f5:5d:a3:e3:64:bf:
ce:9a:95:2e:e2:07:40:c7:6d:df:9a:83:73:57:b3:
4e:45:8a:7b:e5:ad:ff:21:81:60:e4:2b:09:85:71:
9c:70:fc:fe:f1:d1:d4:17:8a:b3:c9:fa:cf:ac:54:
b1:0d:97:1b:12:8d:8d:53:a7:cd:5c:22:a2:04:45:
50:6b:24:62:5e:ec:7b:78:7d:8a:02:ed:af:55:5a:
42:16:84:ac:43:47:cc:bc:a4:55:60:ff:6f:17:4a:
5c:ec:47:87:89:a1:1e:26:1d:d5:ed:ec:91:7b:12:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:8F:FD:F4:DA:CA:2A:E9:8C:27:56:69:3E:AD:D0:95:94:77:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93D9AC94CACC11EFBF687CA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.84.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:d8:bd:7c:ee:ca:40:86:e5:9d:af:8b:0e:3b:a5:b9:46:
f7:26:9d:58:a3:bb:84:1f:8b:b2:92:30:5e:44:b9:77:0b:4b:
3f:f7:95:a6:41:7a:e7:53:f9:7e:3b:c7:bd:4b:95:c0:4e:46:
d3:03:7c:d5:23:0c:a9:52:20:c5:4b:a8:db:5e:7f:8e:26:a8:
ce:24:e3:ea:13:21:21:35:63:30:e7:7a:a7:f4:73:7a:e8:68:
cc:47:a6:19:31:81:25:2a:d4:cc:54:22:b1:01:2d:c8:50:b3:
0d:5d:32:d1:d3:e5:71:6f:b2:69:55:3b:4a:2c:7b:2f:e9:fa:
d0:a5:1e:58:4d:bb:8f:04:2a:25:bb:ba:18:4e:e5:cb:9f:ee:
b9:f1:4c:e1:ed:4c:10:82:ee:70:94:83:ea:a9:85:f4:b5:0b:
91:e3:c2:fd:d2:28:fd:6b:04:6e:e2:aa:7e:52:8e:db:58:c5:
d0:f5:f6:77:c9:70:01:c3:30:57:91:53:ce:49:ec:4a:ec:32:
cc:16:24:1d:ac:55:0b:ba:01:04:e0:2c:1a:dd:d9:61:fc:18:
21:d6:c4:ae:5a:2e:f5:6f:9d:74:b8:03:c8:db:93:8b:70:1e:
a4:9a:5a:e0:d7:5c:d2:f3:83:42:6c:a7:df:6b:8e:31:2d:ce:
45:23:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:55:01 2025 by rpki-client